CVE-2002-0639
CVE-2002-0639
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is using SKEY or BSD_AUTH authentication.
CVSS 9.8 · Critical · EPSS 18.3% · Fix available
- Published
- Updated
Affected products and versions
Original sources
- http://www.debian.org/security/2002/dsa-134
- http://www.iss.net/security_center/static/9169.php
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0335.html
- http://marc.info/?l=bugtraq&m=102514371522793&w=2
- http://www.osvdb.org/6245
- http://www.cert.org/advisories/CA-2002-18.html
- http://marc.info/?l=bugtraq&m=102521542826833&w=2
- http://www.securityfocus.com/bid/5093
- http://www.linuxsecurity.com/advisories/other_advisory-2177.html
- http://www.kb.cert.org/vuls/id/369347
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000502
- http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0206-195
- http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:040
- http://marc.info/?l=bugtraq&m=102514631524575&w=2
- https://web.archive.org/web/20080622172542/www.iss.net/threats/advise123.html
- https://twitter.com/RooneyMcNibNug/status/1152332585349111810
- https://nvd.nist.gov/vuln/detail/CVE-2002-0639